Question 70
A desktop service validation exercise records: An administrator accidentally grants all users edit rights to another users profile directory. Which observation MOST DIRECTLY verifies the appropriate corrective approach succeeded?
Explanation
Correct Answer
The test concerns: An administrator accidentally grants all users edit rights to another users profile directory. Decisive evidence is: A pilot user authenticates and creates their isolated VHDX while unrelated users cannot browse that profile. This confirms the intended correction (For an eligible Microsoft Entra joined profile scenario configure supported Azure Files Entra Kerberos, share-level access and NTFS permissions together.) and tests the failure risk: Share-level RBAC permission alone does not repair missing NTFS rights and an incompatible authentication mode can block mounting. Other healthy Azure resources or unrelated service telemetry would not, by themselves, establish success for this case.
Incorrect Answers
This option relates to Azure NetApp Files SMB volume deployment under AZ-140 objective group 1.2. It addresses a different failure risk: A volume with wrong network or Active Directory settings can remain unreachable or fail ACL operations from hosts. But the observed requirement is: An administrator accidentally grants all users edit rights to another users profile directory. For the targeted topic (Azure Files Entra Kerberos and file permission layers), the directly relevant verification is: A pilot user authenticates and creates their isolated VHDX while unrelated users cannot browse that profile. That other measure may be useful in a separate environment, but does not by itself establish the specific requested outcome. An independent qualified Azure Virtual Desktop expert must adjudicate any plausible overlapping alternatives before release.
This option relates to Storage redundancy and FSLogix profile recovery planning under AZ-140 objective group 1.2. It addresses a different failure risk: Storage replication alone is not a verified backup against accidental profile deletion or corruption. But the observed requirement is: An administrator accidentally grants all users edit rights to another users profile directory. For the targeted topic (Azure Files Entra Kerberos and file permission layers), the directly relevant verification is: A pilot user authenticates and creates their isolated VHDX while unrelated users cannot browse that profile. That other measure may be useful in a separate environment, but does not by itself establish the specific requested outcome. An independent qualified Azure Virtual Desktop expert must adjudicate any plausible overlapping alternatives before release.
This option relates to FSLogix profile storage capacity and IOPS planning under AZ-140 objective group 1.2. It addresses a different failure risk: Selecting low-throughput SMB storage can create logon storms and slow container attachment even when session hosts are healthy. But the observed requirement is: An administrator accidentally grants all users edit rights to another users profile directory. For the targeted topic (Azure Files Entra Kerberos and file permission layers), the directly relevant verification is: A pilot user authenticates and creates their isolated VHDX while unrelated users cannot browse that profile. That other measure may be useful in a separate environment, but does not by itself establish the specific requested outcome. An independent qualified Azure Virtual Desktop expert must adjudicate any plausible overlapping alternatives before release.